$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144742.roa File: AS144742.roa (raw, json) Hash identifier: VjdC82CLUxm7m9SiE4ldNsMd5c+uWfZuTSIL49cAdFc= Subject key identifier: 26:17:FA:DA:FD:90:5A:E1:23:B7:35:41:0A:B3:0C:8C:57:60:53:C6 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 2502C1E1FAC9379A3E002F94844CB4BA06563039 Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144742.roa Signing time: Wed 04 Mar 2026 06:20:30 +0000 ROA not before: Wed 04 Mar 2026 06:15:30 +0000 ROA not after: Wed 03 Mar 2027 06:20:30 +0000 asID: 144742 IP address blocks: 240a:a82c::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:02:c1:e1:fa:c9:37:9a:3e:00:2f:94:84:4c:b4:ba:06:56:30:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:15:30 2026 GMT Not After : Mar 3 06:20:30 2027 GMT Subject: CN=2617FADAFD905AE123B735410AB30C8C576053C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7c:4c:b7:e4:e4:6b:50:85:66:7b:96:5c:d9: 22:94:e1:7b:ab:4c:bb:92:5d:8c:5a:b8:bb:06:de: 0b:9e:1c:da:9d:b8:4a:6c:15:62:d3:9e:16:6f:f6: 4c:a2:bd:90:a2:e0:e6:1a:38:76:93:e3:c5:11:9e: 8c:9f:eb:1f:0d:e0:de:1e:91:6b:45:53:46:9e:a6: cb:e5:41:18:22:ce:7d:93:13:cc:fe:48:d1:ef:5d: b8:43:5f:76:a6:af:f5:6f:39:2a:8b:28:03:77:59: c8:7f:a3:64:b3:5e:3b:e0:ce:66:e4:48:7b:3b:94: ef:44:e5:93:15:c2:f6:f5:61:95:a4:c7:f0:da:d3: e2:04:07:e0:55:8d:04:5b:65:cd:07:03:5f:a7:a0: 49:b4:47:97:c8:7c:61:b8:20:ed:0c:31:3f:86:de: 0e:dc:81:f7:7a:6c:4f:5b:ef:75:6d:21:29:5a:25: 83:f3:ee:5c:0b:f0:6b:ae:e2:d0:c8:2f:6b:c1:1e: 63:65:6a:c1:fa:14:a6:20:e7:ba:65:02:6d:e7:56: 1d:c1:20:c1:4c:bc:35:0c:79:9e:45:38:95:33:b0: f8:14:24:a9:c7:ad:66:08:a4:15:c9:5e:d2:bc:62: 23:f9:0c:c3:60:38:56:80:65:4f:c0:0b:4e:45:37: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:17:FA:DA:FD:90:5A:E1:23:B7:35:41:0A:B3:0C:8C:57:60:53:C6 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144742.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a82c::/32 Signature Algorithm: sha256WithRSAEncryption 64:c9:21:a1:bb:bf:cb:1c:76:9c:26:1b:89:9f:45:a5:7a:81: 0e:ee:d6:73:e5:07:b7:df:7d:2c:2e:35:47:42:97:af:9a:d9: bf:ed:3e:aa:23:e0:4f:31:15:05:a4:37:3e:4f:bc:ac:ba:e0: e1:b0:6f:53:e9:dc:88:c0:49:9e:5b:96:24:8d:49:0f:1d:14: ef:a6:aa:7f:b2:d4:7a:7e:fb:b6:3a:6c:01:19:74:63:6a:5b: 65:bd:6f:39:81:0e:98:ce:66:b1:ad:3c:7d:09:85:8e:2e:a4: ad:fa:4a:16:e7:43:bd:92:00:ff:07:0f:76:12:18:b5:75:7b: 8a:c4:83:79:7e:5c:f7:a7:8d:f9:91:6c:25:4b:5a:45:e2:0d: e3:5b:83:57:11:33:9b:57:a3:18:18:e1:20:34:cd:ec:20:ca: f5:6b:20:b5:6a:68:d0:d1:14:51:dd:0f:52:f5:b9:a6:18:2a: f1:2a:ed:95:af:f9:85:46:35:23:6d:da:a7:b8:44:b5:c8:64: 11:75:50:6f:69:02:62:b7:72:c7:70:51:ad:77:ec:b8:01:8c: 36:3c:5d:c5:89:5e:c1:bb:92:4c:65:d9:ea:01:f1:25:48:a5: a7:b7:7d:e4:14:cb:0e:fd:0f:2f:19:2f:c3:b2:a8:4f:04:62: eb:13:fe:cb -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUJQLB4frJN5o+AC+UhEy0ugZWMDkwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MTUzMFoX DTI3MDMwMzA2MjAzMFowMzExMC8GA1UEAxMoMjYxN0ZBREFGRDkwNUFFMTIzQjcz NTQxMEFCMzBDOEM1NzYwNTNDNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAN18TLfk5GtQhWZ7llzZIpThe6tMu5JdjFq4uwbeC54c2p24SmwVYtOeFm/2 TKK9kKLg5ho4dpPjxRGejJ/rHw3g3h6Ra0VTRp6my+VBGCLOfZMTzP5I0e9duENf dqav9W85KosoA3dZyH+jZLNeO+DOZuRIezuU70TlkxXC9vVhlaTH8NrT4gQH4FWN BFtlzQcDX6egSbRHl8h8Ybgg7QwxP4beDtyB93psT1vvdW0hKVolg/PuXAvwa67i 0Mgva8EeY2VqwfoUpiDnumUCbedWHcEgwUy8NQx5nkU4lTOw+BQkqcetZgikFcle 0rxiI/kMw2A4VoBlT8ALTkU3r5UCAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQmF/ra /ZBa4SO3NUEKswyMV2BTxjAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDc0Mi5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK qCwwDQYJKoZIhvcNAQELBQADggEBAGTJIaG7v8scdpwmG4mfRaV6gQ7u1nPlB7ff fSwuNUdCl6+a2b/tPqoj4E8xFQWkNz5PvKy64OGwb1Pp3IjASZ5bliSNSQ8dFO+m qn+y1Hp++7Y6bAEZdGNqW2W9bzmBDpjOZrGtPH0JhY4upK36ShbnQ72SAP8HD3YS GLV1e4rEg3l+XPenjfmRbCVLWkXiDeNbg1cRM5tXoxgY4SA0zewgyvVrILVqaNDR FFHdD1L1uaYYKvEq7ZWv+YVGNSNt2qe4RLXIZBF1UG9pAmK3csdwUa137LgBjDY8 XcWJXsG7kkxl2eoB8SVIpae3feQUyw79Dy8ZL8OyqE8EYusT/ss= -----END CERTIFICATE-----Generated at Sat Mar 28 11:49:53 2026 by rpki-client